Your organization allows employees to use their personal mobile devices to check their work emails. You need to remove the employee's work email data from their phone when they leave the organization. What should you do?

• A. Set up 2SV authentication on the devices.
• B. Set up basic mobile management on the devices.
• C. Set up advanced mobile management on the devices.
• D. Set up data protection rules to prevent data sharing externally.

Several employees from your finance department are collaborating on a long-term, multi-phase project. You need to create a confidential group for this project as quickly as possible. You also want to minimize management overhead. What should you do?

• A. Create a Google Group and update the settings to allow anyone in the organization to join the group.
• B. Create a Google Group and appoint a group admin to manage the membership of this group.
• C. Create a dynamic group and define the Department user attribute as a condition for membership with the value as the finance department.
• D. Create a Google Group by using Google Cloud Directory Sync (GCDS) to automatically sync the members.

External sharing at your company is only permitted for the sales and marketing department.
Engineering is not allowed to share externally. You need to configure the sharing settings to comply with this policy. What should you do?

• A. Create organizational units (OUs) for each department. Configure different external sharing settings for each OU.
• B. Configure Drive trust rules to restrict the engineering department from sharing externally.
• C. Create separate shared drives for each department with different external sharing settings.
• D. Use a data loss prevention (DLP) solution to control external sharing based on user groups.

You've noticed an increase in phishing emails that contain links to malicious files hosted on external Google Drives. These files often mimic legitimate documents and trick users into granting access to their accounts. You need to prevent users from accessing these malicious external Drive files, but allow them to access legitimate external files. What should you do?
(Choose two.)

• A. Implement two-factor authentication for all users
• B. Deploy advanced malware detection software on all user devices to scan and block malicious files.
• C. Enforce stricter password policies.
• D. Conduct regular security awareness training to educate users.
• E. Create a Drive trust rule that blocks all external domains except for a pre-approved list of trusted partners.

Your company has a globally distributed remote work team. You want to ensure all team members adhere to the company's data security policies and only access authorized systems based on their location and role. What should you do?

• A. Configure access control policies with conditional access.
• B. Set up and mandate the use of a company-wide VPN for all remote access.
• C. Implement two-factor authentication for all remote team members.
• D. Create and enforce data loss prevention (DLP) rules to control data sharing.